SECURITY & TRUST ARCHITECTURE

Engineered for Reliability, Privacy & Cost Safety

MetaOrbit AI is designed with defense-in-depth principles, atomic concurrency guarantees, encrypted secret isolation, and strict server-side authorization across every API call.

Authentication & Session Protection

JWT tokens signed with server-managed asymmetric secrets.
HTTP-only, Secure, SameSite=Lax cookie storage preventing client-side script inspection.
bcrypt password hashing using OWASP-compliant cost factor 12.
Brute-force and credential-stuffing defense on all authentication routes.

Tenant Isolation & Data Scoping

Strict tenant-level foreign key scoping on all relational database records.
Zero cross-workspace queries or data leakage between customer environments.
Role-Based Access Control (RBAC) separating Workspace Owners, Admins, and Support staff.
Granular team member permissions for pipelines, contacts, and messaging channels.

Secret Management & Zero Client Exposure

Integration credentials and LLM provider keys stored in Google Cloud Secret Manager.
Server-side encryption for connected third-party OAuth access and refresh tokens.
Zero server API keys or internal database connection strings bundled into client JavaScript.
Masked credential endpoints returning configuration status without plaintext exposure.

AI Cost Protection & Atomic Metering

Atomic credit reservation model preventing concurrency race conditions and negative balances.
Automated, zero-friction credit refunds if an external AI provider fails or encounters timeouts.
Tenant-level monthly vendor cost ceilings with early telemetry alert thresholds (80% and 90%).
Automatic graceful degradation to high-speed economical models under margin pressure.

Billing & Webhook Integrity

Payments and subscriptions managed exclusively through Paddle Merchant of Record.
Zero cardholder payment card data stored or processed on MetaOrbit application servers.
HMAC SHA-256 webhook signature verification utilizing constant-time timingSafeEqual comparisons.
Idempotent webhook transaction ledger with comprehensive event logging.

Infrastructure & Upload Guards

Strict 50 MB single-file upload ceiling rejecting oversized files before storage ingestion.
Storage plan quotas enforced server-side (Trial 250MB, Starter 2GB, Growth 10GB, Pro 50GB, Scale 200GB).
Automation flow limits constrained to maximum 50 steps with recursion loop detection.
Comprehensive audit trail logging all sensitive admin actions and workspace changes.

Responsible Security Disclosure

If you discover a potential vulnerability or security concern, please contact our engineering security team directly at business@metaorbitai.com. We acknowledge reports within 24 hours.